diff --git a/kustomization.yaml b/kustomization.yaml
index 57eb211ae118d5c006b8c4df12402932217629b0..38e2ab1f0666ad665fff3977a715be6e94f40e6a 100644
--- a/kustomization.yaml
+++ b/kustomization.yaml
@@ -5,3 +5,6 @@ resources:
 - manifests/clusterrole.yaml
 - manifests/clusterrolebinding.yaml
 - manifests/system-upgrade-controller.yaml
+images:
+- name: rancher/system-upgrade-controller
+  newTag: v0.14.0
diff --git a/manifests/system-upgrade-controller.yaml b/manifests/system-upgrade-controller.yaml
index 850fd3dee88952bccceb767cd55ad82889a2ed97..955f549712fa02ba5250eb4b69d690d9f44ffadf 100644
--- a/manifests/system-upgrade-controller.yaml
+++ b/manifests/system-upgrade-controller.yaml
@@ -66,7 +66,7 @@ spec:
           effect: "NoExecute"
       containers:
         - name: system-upgrade-controller
-          image: rancher/system-upgrade-controller:latest
+          image: rancher/system-upgrade-controller:v0.14.0
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true